Page MenuHomeVyOS Platform

Add support for op-mode PKI direct install into an active config session
Closed, ResolvedPublicFEATURE REQUEST

Description

This PR adds support for generated PKI objects to be directly installed into an active config session.

From op-mode:

vyos@vyos:~$ generate pki ca install test
Enter private key type: [rsa, dsa, ec] (Default: rsa) ec
...
You are not in configure mode, commands to install manually from configure mode:
set pki ca test certificate '...'
set pki ca test private key '...'

From conf mode:

vyos@vyos:~$ conf
WARNING: You are currently configuring a live-ISO environment, changes will not persist until installed
[edit]
vyos@vyos# run generate pki ca install test
Enter private key type: [rsa, dsa, ec] (Default: rsa) ec
...
2 value(s) installed. Use "compare" to see the pending changes, and "commit" to apply.
[edit]
vyos@vyos# comp
+pki {
+    ca test {
+        certificate ...
+        private {
+            key ...
+        }
+    }
+}

Details

Version
-
Is it a breaking change?
Perfectly compatible